7eb927bb27dff19f1fd7603d5721bb3e2e5b51bad2f1dbd11fd401d3507fe2b5

Sharing

Copy URL Twitter E-mail

General

Target

7eb927bb27dff19f1fd7603d5721bb3e2e5b51bad2f1dbd11fd401d3507fe2b5
Size

368KB
MD5

06261c80c9ed79d447181da95d4b695a
SHA1

954d61634feb39d8eb4bd7b1ca54dad43725b8a2
SHA256

7eb927bb27dff19f1fd7603d5721bb3e2e5b51bad2f1dbd11fd401d3507fe2b5
SHA512

797fe4e39d27e18559c40a1e7bd8ec494253c74cf694ddb45d70686b2078f077b293eb3e8a1b14418ebe45987b56f02558cb627b90cc2648982e1cbdccb327f7
SSDEEP

6144:4ujboiPtFVoY7/zfkvPPtFVoY7/zfkv7sm8:xjbp3VP7Q33VP7Q0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7eb927bb27dff19f1fd7603d5721bb3e2e5b51bad2f1dbd11fd401d3507fe2b5

Files

7eb927bb27dff19f1fd7603d5721bb3e2e5b51bad2f1dbd11fd401d3507fe2b5
.dll windows:6 windows x86

599e185349ceeadad4721c09dc834ee5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
InitCommonControlsEx
PropertySheetW

shlwapi

DelayLoadFailureHook
SHRegGetUSValueW
StrChrW
StrToIntW

user32

CheckDlgButton
DialogBoxParamW
EnableWindow
EndDialog
GetDlgItem
GetDlgItemTextW
GetParent
GetSystemMetrics
GetWindowLongW
IsDlgButtonChecked
LoadIconW
LoadImageW
LoadStringW
SendMessageW
SetDlgItemTextW
SetWindowLongW
SetWindowTextW
ShowWindow

advapi32

RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
calloc
free
fwrite
getenv
memmove
memset
realloc
strchr
strcmp
strcpy
strcspn
strlen
wcschr

kernel32

DisableThreadLibraryCalls
FreeLibrary
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
LoadLibraryA
LoadLibraryExW
RaiseException
ResolveDelayLoadedAPI
WideCharToMultiByte
lstrcmpW

ntdll

RtlUnicodeToUTF8N
_chkstk
_vsnprintf

Exports

Exports

AddInternetPropertySheets
AddInternetPropertySheetsEx
CPlApplet
ClearMyTracksByProcessW
DisplayPopupWindowManagementDialog
DllInstall
GetAddSitesDisplayUrl
ImportExportPFX
LaunchAddSitesDialog
LaunchConnectionDialog
LaunchInternetControlPanel
LaunchPerSitePrivacyActionDialog
LaunchPopupWindowManagementDialog
LaunchPrivacyDialog
LaunchSecurityDialog
LaunchSecurityDialogEx
LaunchSiteCertDialog
OpenFontsDialog
OpenFontsDialogEx
OpenLanguageDialog
ResetIEtoDefaults
ShowDeleteBrowsingHistoryDialog
ShowFeedOptionsDialog
ShowLanguageDialog
SiteCert_RunFromCmdLine

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 573B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

599e185349ceeadad4721c09dc834ee5

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

shlwapi

user32

advapi32

ucrtbase

kernel32

ntdll

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 14KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 420B

.rodata Size: 4KB - Virtual size: 573B

.rsrc Size: 296KB - Virtual size: 295KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 14KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 420B

.rodata
Size: 4KB - Virtual size: 573B

.rsrc
Size: 296KB - Virtual size: 295KB

.reloc
Size: 4KB - Virtual size: 1KB